network
CISA confirmed active exploitation of WordPress Core flaw CVE-2026-119977 and added it to the KEV catalog. Federal civilian agencies must remediate by…
CISA added an exploited GitLab RCE and a Cisco firewall DoS bug to the KEV catalog. The Hacker News said FCEB agencies are recommended to apply both fixes by November 1, 2026.
DDoSecrets published work records on more than 41,000 DHS employees and contractors, including contacts and application-access groups. Okta says it has no evidence its data or systems were compromised.
Anthropic says an unreleased internal model chained lab exploits against Chrome, Safari, Android, Windows, and Linux. Vendors have already patched the reported flaws.
GMO Internet refused a roughly $50 million ransom after attackers claimed to leak data from Onamae.com Desktop Cloud, a service India Today said could affect 26,739 servers.
Honeypots recorded PHP2Shell remote code execution against Apache mod_php running PHP 8.4.26. CVE-2026-115560 still has no emergency patch, only a session setting workaround.
